200-201 · Question #394
An analyst performs traffic analysis to detect suspicious activity and identifies the multiple UDP connections through the same port. Which technology makes this behavior feasible?
The correct answer is D. NAT. Network Address Translation (NAT) allows multiple internal devices to share a single public IP address, making it appear externally as if multiple connections are originating from the same source port and IP.
Question
An analyst performs traffic analysis to detect suspicious activity and identifies the multiple UDP connections through the same port. Which technology makes this behavior feasible?
Options
- ATOR
- BACL
- CP2P
- DNAT
How the community answered
(64 responses)- A3% (2)
- B9% (6)
- C6% (4)
- D81% (52)
Why each option
Network Address Translation (NAT) allows multiple internal devices to share a single public IP address, making it appear externally as if multiple connections are originating from the same source port and IP.
TOR (The Onion Router) is a system for anonymous communication, not a technology that enables multiple internal devices to use the same external source port.
An ACL (Access Control List) is used to filter network traffic based on defined rules, not to allow multiple connections from different internal IPs to use the same external port.
P2P (Peer-to-Peer) networking is a distributed application architecture, but it doesn't inherently facilitate multiple internal connections appearing as one external source port.
NAT translates private IP addresses and port numbers to a single public IP address and a potentially different port number when traffic leaves the private network, and vice-versa for incoming traffic. This allows multiple internal hosts to share one public IP, enabling them to make multiple connections using the same source port from an external perspective, differentiated by the NAT device's port mapping.
Concept tested: Network Address Translation (NAT) functionality
Source: https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras/nat/network-address-translation-nat
Topics
Community Discussion
No community discussion yet for this question.